$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/b04e8fd2-409b-30a3-b752-ca413b899c45.roa File: b04e8fd2-409b-30a3-b752-ca413b899c45.roa (raw, json) Hash identifier: 6bWrgHMNix2a7/+xfJ5FU8NHhA/drEUIsNp0n391iwg= Subject key identifier: 94:4D:58:D3:CD:31:83:20:3B:3D:82:3C:C9:01:9E:4C:BA:47:77:77 Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584921840B03076F421239635700 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/b04e8fd2-409b-30a3-b752-ca413b899c45.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 26768 IP address blocks: 104.251.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:0b:03:07:6f:42:12:39:63:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=d27137c1-77df-4963-8d38-1e211b6333c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9f:24:8a:17:68:55:d9:d3:fb:f8:25:ce:4b: 59:56:c6:c5:41:dd:1f:c2:f0:47:01:49:06:80:05: 88:09:0b:21:6c:db:cf:12:4e:76:14:ef:79:27:ec: 84:a1:ee:c1:d6:ef:b0:71:90:46:32:15:6c:9b:a2: 61:3d:30:5a:db:c7:e0:43:b7:e8:a0:15:97:b1:aa: 27:ac:cd:4d:96:5d:23:80:ca:ce:79:ec:97:4f:2e: ea:26:3d:23:33:68:4c:c3:5e:8b:ea:f7:c4:f2:b6: 54:04:6a:97:e7:d7:1a:db:73:97:17:30:bc:c3:f4: ef:42:e7:15:d7:9f:50:8c:79:83:75:53:5a:fa:2a: 37:d4:81:c8:a3:c2:03:c8:ca:48:11:c6:1f:8e:5d: 2b:68:cb:0d:cb:da:41:50:c9:52:56:fc:09:7c:bf: 86:79:19:25:1b:4c:c2:86:0b:f2:13:f1:92:03:a9: 49:47:8c:83:d9:31:10:97:0c:28:6d:da:d5:29:e7: ff:8c:bb:6f:ce:c5:d8:ed:ae:a0:16:03:ff:26:ec: 59:3a:bf:fd:73:25:f4:c2:d0:64:64:05:fc:cf:c5: c9:81:60:14:2a:0a:02:aa:4a:67:66:52:4b:d6:c1: 29:1f:71:cc:60:96:c3:8f:c7:af:a5:01:26:a5:59: 99:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4D:58:D3:CD:31:83:20:3B:3D:82:3C:C9:01:9E:4C:BA:47:77:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/b04e8fd2-409b-30a3-b752-ca413b899c45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 104.251.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:5b:29:da:07:86:b8:74:36:ec:27:61:89:d6:03:29:b2:2f: 48:d1:f6:e7:28:64:c6:8a:a3:ec:71:94:ca:88:f0:ce:27:5c: 19:65:ea:57:58:20:86:27:50:96:4c:85:02:ae:d2:1e:8f:9d: b1:2c:04:6a:5a:7b:e0:00:1e:bd:3d:e2:cb:f9:ed:69:86:9e: 55:07:7f:e3:95:fe:bb:17:af:ce:89:42:01:0c:37:d0:47:9d: 24:e6:0e:a8:05:d4:a5:03:04:61:79:3d:d2:fa:5e:ad:6f:bc: 1d:e1:91:de:4a:ae:45:c5:f6:15:89:43:01:74:16:7c:3f:43: 34:b3:a9:db:ff:96:b7:27:3f:22:e6:b4:c5:3f:59:39:34:2f: ab:17:7f:8e:7c:89:8e:01:33:30:fd:39:22:0c:60:a4:d1:1a: 17:71:27:3e:8e:96:e7:cb:73:52:49:53:23:9c:be:39:3e:35: 86:88:29:de:b7:26:52:0e:54:b3:6b:de:23:b2:cf:b9:9f:bd: d4:6d:aa:4e:83:40:a3:c7:45:18:39:d7:84:cf:1c:10:ec:6c: b1:98:01:1d:27:71:be:aa:00:f9:9e:70:7a:60:1d:05:e7:df: 9c:39:75:4d:5f:c3:e8:0b:fb:c7:0b:72:e6:eb:b5:16:62:fd: e9:fe:10:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAsDB29CEjljVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZDI3MTM3YzEtNzdkZi00OTYzLThkMzgtMWUyMTFiNjMzM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3J8kihdoVdnT+/glzktZVsbFQd0fwvBHAUkG gAWICQshbNvPEk52FO95J+yEoe7B1u+wcZBGMhVsm6JhPTBa28fgQ7fooBWXsaon rM1Nll0jgMrOeeyXTy7qJj0jM2hMw16L6vfE8rZUBGqX59ca23OXFzC8w/TvQucV 159QjHmDdVNa+io31IHIo8IDyMpIEcYfjl0raMsNy9pBUMlSVvwJfL+GeRklG0zC hgvyE/GSA6lJR4yD2TEQlwwobdrVKef/jLtvzsXY7a6gFgP/JuxZOr/9cyX0wtBk ZAX8z8XJgWAUKgoCqkpnZlJL1sEpH3HMYJbDj8evpQEmpVmZiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRNWNPNMYMgOz2CPMkBnky6R3d3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvYjA0ZThmZDItNDA5Yi0z MGEzLWI3NTItY2E0MTNiODk5YzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPvvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlbKdoHhrh0NuwnYYnWAymyL0jR9ucoZMaKo+xxlMqI8M4nXBll6ldY IIYnUJZMhQKu0h6PnbEsBGpae+AAHr094sv57WmGnlUHf+OV/rsXr86JQgEMN9BH nSTmDqgF1KUDBGF5PdL6Xq1vvB3hkd5KrkXF9hWJQwF0Fnw/QzSzqdv/lrcnPyLm tMU/WTk0L6sXf458iY4BMzD9OSIMYKTRGhdxJz6OlufLc1JJUyOcvjk+NYaIKd63 JlIOVLNr3iOyz7mfvdRtqk6DQKPHRRg514TPHBDsbLGYAR0ncb6qAPmecHpgHQXn 35w5dU1fw+gL+8cLcubrtRZi/en+EOA= -----END CERTIFICATE-----Generated at Fri Mar 14 09:30:11 2025 by rpki-client